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g€# B im^M X i^^xmmm x b jtjc-rsi^iag 

rtwiasttr. jsm#Atti»oies-axAfcs^^ 
B©^igsivB*^e.-7x^aKA.B*f^fi2u SM^sa 70 
@ ^j-offisBsi x B t B o^Ma V A *\6 v;^ a K 

B.A«f^)ffiU C(Dtt. KA;B = KB.A*<fiKfiU # 

a, $fc«> ^svxi'a^sfl^Aofis^-aA^sf^/SL. 
i,>Ttt, fffcKffl#<D4^r»satii^©ffiSBa*^6-v;^^ 

a«:f^fiSt-Si:fc*<, l21gSnTVS^;^:5'a«r<^3 20 

ttx-^'^^fbak^^v^Acstf, ^m^Bt<om 

P «: r- e^fUl k «c T^^fk LfcBf 
Ei(k : P) f'-^'Bg^fliak^vx^'aKA.Bk: 
T^#{bLfc^^XE2(KA;B : k) «:§M#BC^^ 
U §€#Ba, vX^'aKB.A*fflVTE2(KA.B : 
k) jb^ex-^Sfflg^faik^a^^tU. ?6tCx-5f© 

^{tak^ffivTEi (k ; p) *^P)J^-;v*3S:p^®^ 
# B fc«LTjg<i-r « ;< -;i/3S:«r©#ffr -)\^ 

^^'{t■nmxib■:>x. ^mmtLx. ■t>tni't>^ 

sa X A 43 J: ifw^m x A Kj^fc-r s djBaa y A *f^fig 
gm^B«a5ffiaxB*5j;t;ase5axBtcwjcf 
MayB^'f^figu -t>:Sf'\©§si5!iatuT, mm^ 

yAj=exp(a : xAj){niod p) for 
^ItSU yAj (j = l. •-. n) ;&S<i#A(Di.^gaa 

tLxmmu 

gm#B(i, 0<xBj<p-l*S§S(xBj (j = l. 

yBj=exp(a : xbj) (mod p) for j = l 
mWh. ysj (j=l. -. n) ^§^SB©i^F»aa 
iLTlSU (fcfcU exp(a : x) «a€rx*Lfcfil SKa-b^:, 

i&«t>t) , -^x^mnmrntLx. caa] 

jS^ffi#A(i, e^^<0«5SaT'*SSI!txAji:§«#B© 

KA.B = n {expCyBj : xAj) (mod p) I j = l 


♦ ^A© I Ditffi I A*^P)25<i«AtC@W©«®asA*, 
SA=f(lA). Tf^figU (^aicSfi#B©I Dlf« 

lB3b^p)S€#Blc:@W©li5ggasB«:, sB=f (Ib). 

T-ftdtu -trv^affis-asAfc sAii:5<ffi:.-rsi»^F»aav 
ACDffl (sA. va) ^mm^Mc^^icmisu ^mc 

SJffiasBfc SBtcMfSfSi^BgavBCDffl (SB, vb) 
%Sm#BC$^tcE:fSL, C©i:t, .lA*lB4P)ff 
SA* SBib^OvA* VB. A^fiStTiL, Sm^Ati (yA. 
va) ^m€B{± (yB. vb) ^=i:ti^n^^<0<i^ 

pif«i:brs®u vj^^ac^^iiaatLT. 
#A{4i^j©«;ffia (xA. sa) i:§^#B©i>ifla 

(yB, vb) *^5)T;^^'aKA.B«rffdtU Sfl«Btt 
iiJ'ODS^a (xB. SB) fcSffiSBO^Ma (yA. 
va) *>e.'7X^»aKB.A«ffjSL. CO^t, Ka.b = 

KB.A*<figitL. mc, 2Sfl«Att«?p«-;i/*25ffl-r 
5«iS*^^v^§(i#»i:«LTti, •?-ne.©S<i#i:jS<i 
#AK©#v7,i'a, tfctt> ^VX^'a%jiSffl#A© 

sjs^a*^5f^fieLfca«rfflv^TB&^{ktfcfliffi, 

ffofc46*^^r♦vx^»a*'i^^il*«^^ ■v7,3'a*'iB« 
^nrv^sfc©icot,^Ta, »ffccffi#©i>iaai:Si)' 
flDi8ffia*^e.-7x^a«:ff^-rscfc*<, fstt^nr 

i-'S^X^'a^i^^ctfcU ;>«-;l'*i(0^«#<bKi 
SfcLT, jlHi#At±x-^K^{t;ak*7>;5'"Al::S 
tf, §<i«Bt:©KT-«iitc«^-r5a5S;a©#5^7';l/ 
rfUXA^ffll^T^ pf-zV^XP^x-tJ^Bt^^takK: 
TBi^fktrce^XE) (k : P) fcx x-^f^^^kSk 
«r^X^'aKA.BtCTHt^{l:Ufc^^XE2(KA.B : k) 
^S«#Btcai€U §€#B14> vX^aKB.A«rffl 

v^tE2(Ka.b : k) *>6x-^'^#{bak%«#<k 

SP.«CT-^'Bg#{bak%fflV>TEi(k : P) *^e. 

^mtumx^ox. ^mvmt\.x. mmmk^t. 0 

<xAj<p- 1 *5eSSxAj (J = 1, -, n)^^>^ 
[IS 1] 

j = 1, • •, n, ■■■ (Si) 
5S ■•, n) «:^>:J^AK:jit/, 
CS12] 


yBj 


... (IS 2) 
(J = l. ■■ 


n) *fflVTv •7Xi' 


(3) 
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Kb. A = n (exp(yAj : xBj) 

^ (o^m^ t mm^ a f^os v x ^ gi e> ^ ^ 

Sa. S/c(i. aiM#AOffi«^SlT'SS§SExAj (j = 
1. n) tm^^m^di)^^. 

CS5] K(A) =0 (XAI, •". XAn) . 

CCA) -Ea(K(A) ; Sa) . 

3b^E1i^nTV^5 feOtCOV^Tti. grfctCffi^CD^FJSi 

M) (iA;b^m}$-r^*BffiSIBg^7;VrruXAlc<fct)^:Sc 

P) r-^J^B&^ftak^^X^J^SiKA.BtcTHg^ft: 
tfca|^XE(KA.B ; k) ;&p<-;i/§^«BtC3i^<BU 
§^#B(i. -rXiJ^SIKB.A^ffll/^TECKA.B ; k) 
er-^Bg^fbSlk^S^fLU ^Btc-r-^Sg^fbSI 

k^ffli/^TE(k ; P) ;b^e^-;^*S:P^a^^t:^^ 

(Di^^rjim^^m&.tLX^'Om^pzt. miSiau a 

2^^^gsL. p2- i(o^BSc5^<i?^«J8?^L. minmA 

it. 0<XA<pi-l*§gSSExA^^>^AlcSt>\ 
[St6] yA=exp(at : xa) (mod pi) , 

S<i#B(i. 0<xB<pi-i^§SiaxB^^>^A 

[Sc7] yB=exp(ai : xe) (mod pi) . 
^iiWL ircfzL. exp(a : x) (i a ^ x^L/cM^S 

tDto ) 

AiOI DlfffilA^b^S. lA+iA (mod p2-l) tW^j 
l^l^s fJ^'^^ Ia^ lB*e)tf I aH- iA (mod pa-l) 


♦ilKB.A?:. 

(mod p) I j = 1. n} . 

=^lB+iB (modp2-l) i:i5:§cfc-5tCiE^SE iA^ji 

t>\ mmmAim^(Dmmmsk^. 

l^Sl sA=exp(lA+ iA : 1/2) (modp2-l), 
JO 1^91 sB = exp( I bH- i B : 1/2) (mod p2— 1). 

icxmwL. ^^^mmmA^t:issmmB\c^±\cm 

[S10] vA=exp(a2 : sa) (mod pa) . 

t<omiyk. vk) ^mm^A(o{iirmtLxmmL. 

[ail] vB=exp(a2 : sb) (mod pa) . 
t(om (yB. vb) ^SM#BcDl.T?^ai:tTSgiL. 

(xA, sa) t^mmB(D'mm.Xtb^ (yB. vb) 

x^X;??81Ka.b:&. 
[ai2] KA.B=g(exp(yB : xa) (rood pi) , exp 
(vB : sa) (mod pa) ), 

icTf^^u ^m^Bit. ^^<ow&m.x^^ (xb, 
sfl) i:3g{i#Ac>i^r^fmT*5 (yA. va) ^m\^^ 

X. vX^fSIKB.A^. 

[ai3] KB.A=g(exp(yA : xB)(mod pi) , exp 
(vA : sb) (mod p2) ), 
SO tcr ft^L. 

C<Ot%. KA.B = KB.A;^)^jtSU 1$tC. i^{i#Ati1i 

Sa. ^fcci. mm^A<ommm (xa. sa) ira^^E 

[S(14] K(A) =0 (xA. sa) . 
(CT{^^t/tSIK(A) ^ffll^T^X^Stcom'&SA«:Bg 

[StlS] C(A) =Ea(K(A) : Sa) . 

40 ^IBtiL. \mcom-)^-)^Mm\n^^^x. -r-^^^ 

$nTV^§vx^li^<^9ili:i:L (fc/cU. EA(k; 

M) {tAtmw-rummm^7)V:i')Xh.iz^K>^ic 
u^m:k\zx^m\:\^rd^^^&t>tc ) 

0i^ftak^^>^Atj:st;. ^mmBt(Dfsxim\c 

50 XP^T'-^^Bg^ltSlkfrCTBi^lbLfcBg^^SCE (k ; 


(4) 

5 

L/ceg^S:E(KA.B : k) *^"-;i/SM#BtC35^ttU 

gfl#B(i. •T;^^?glKB.A^fflV^TE (Ka,b ; k) :^)^ 
e,r-^0g^{bSlk^M^{t:L. :?e>(i:x-^B|#fl:l| 
k^fflt^TECk ; P) f)^iE>:<-J\^*:iCPmmtt^ 

2^^^g3L. p2- l<D^SISiJ^«¥^8SffifcL. 2t<g#A 
Ji:. 0<xA<pt- 1 ^SSaxA€:^>^Atc]itf. 
[S16] yA=exp(ai : xa) (mod pi) . 
^^IfSL, SM#BiJ:. 0<XB<pi-l4§gaxB 

[S17] yB=exp(ai : xb) (mod pi) , 

SsA^iESte^fflV^T. 
[38:18] sA=exp(lA:e) (mod pa- 1), 

# B k:b^o*MB8I s B ^iESt e ^ffli^r. 
[S19] sB==exp(lB : e) (mod p2 - 1) , 

ffit (tzfcL. exp(a : x) fi a^x^Lfcfil^^t) 
f) . 

0. j3ifi#A{iyAt. ^gffiilsAtcWJSt-Si^giSI 

[^20] vA=exp(a2 : sa) (rood pa) , 
(Dm, (yA, va) ^3ifi#ACiljr^1II^Lr§^b. s 
^#BtiyB^. SfffiilsBtc^fJS-r^liiflll 

CS[21] vB=exp(a2 : se) (mod p2) , 
(Om (ye, vb) ^§€#BOi^gf1il^LT§®t. v 

(xA, sa) t§:m^B(0'j::mmv&^ (yB, vb) 

a. vXiJ'SiKA.B^g:. ^0 
[IS22] KA.B = g (exp(yB : xA)(mod pi), exp 
( VB : s a) (mod pz)) , 

icximu §ft#Bii. ^i^(Dm^mx$>^ (xb, 

SB) i:ii^#At01^gf1llT$^ (yA, va) ^fflt^ 
r> •TX:$'aKB.A^. 

imzi KB.A = g (exp(yA : xb) (mod pi), exp 
(va : sb) (mod p2) ), 

JCTfMU CcDtt. KA.B=KB.A;i»^)Sclz:U 

Itic. j^fl«A(im?^-^^^i2l{it-§«^?b^^v^§<i 
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8i*^e>*s*^SA. ^rzi.t. mm^Aom^m. (xa, 
sa) ta^figMSce*^?). 

[a24] K(A) =8 (xA, sa) , 

izximLTzmKiA) :^m^^x^7.^m<om^.Sh^m 

imSl C(A) =Ea(K(A) ; Sa) . 

mm^tixi^^^ t(otcoi^T(i. .iT/'ctcffl^oi:^?^® 

:^tlX\.^^^7s^m^&,vCttL (fcf£t> EA(k ; 
M) (iA;b^m}t1-^iffiffi«iBI^7;l/:fUXAtCcfcD¥i 

M^mk^cxmmthrcm^^mtiir) , 
B&^{bsik^^>^^Atcjitf^ ^m^Bt(omxi^m\c 

3tP^'r-i5?Bg^fbilktCTB&^fkLrcBg^5:E(k : 

p) 'f-'Si^mmk^^7s^mY^K.B\cxmmt 

UfcBg^XE (Ka.b ; k) ;&>:-;l/§<i#B^^:2i^iL^ 
gM#Bt±> VX^SlKB.A^fflV^TE(KA.B : k) 

e.7^-^Bt^fbSlk^S#{kU ^^tcf^-^5rBg^{k8i 
k«rffll/^TE(k ; P) f)^iE>^-^\^^^P^^^itt^ 

pi:'8'J5Ean = pi-p2tSaa*i:^gaU ntD^HSt 
^J^^^rlESa^SS^irU iS^fi^Ati. 0<xA<p- 
1 ft-SgSxA^Sr^y^S^Atc^tf. 
[SC26] yA=exp(a : xa) (mod p) . 
^fYWU §^#B{i. 0<xB<p-l^§SaxB;gr 

[S(27] yB=exp(a : xb) (mod p) , 

(ijgffi#ACDI Dlf«lA:^)^e». lA+iA(mod l.c.d(p 
1-1, P2-1) ) tWmi^. t^-O. U^lBrj:P,iS 
lA+iA (mod Lc.d(pi-1. p2-l)) =*tlBH-i8 
(mod l.c.d(pi-l, p2-i) ) t^ji^^^lcJE^^ 

ih^mu. mmmA\cm^<om. (sa. va) 

[SJ28] sA=exp(lA+ i A : 1/2) (mod I. c. d(pi - 
1, p2-l) ) , 
vA=exp(a : sa) (mod n) , 

tcTit»b. mmic^m^B<o\DmmiBf)^{E>. 
mBizm^(Dm. (sa. vb) 

[^29] sB=exp(lB+ i B : 1/2) (mod I. c. d(pi - 

1, P2-1) ) . 

VB=exp(a ' sb) (mod n) . 

icxtmL. ^^^mm^A^^zf^mmBiz^±icm 


7 

(tcfSL. expCa : x) tia^&xSLrcfil^gb 

1") . 

§^#B(i (ye. vb) ^^^^BcDl^r^Hi: LTSS^ 
fflV^T. Si&<Dm^mV&^ ixk, sa) i:S^^BtD 

^MSiT^fe-S (yB. vb) 3b^6> v;^^?ilKA.BJ&. 
[Sc30] KA.B=g (exp(yB : xa) (mod p). exp(vB : 
sa) (mod n) ). 

tcTft^L. ^m^Bit. ^^(ow^mvs>^ (xb. 

SB) ^3gffi«AOi.^ll^8lT*feS (yA, va) ^fflV^r 

Tx^aKB.A^v 

[fS31] KB.A=g(exp(yA : xB){mod p), exp(vA : 
sb) (mod n) ). 

^§«^Sa. ^fcfi. J^fi#AiO|gS« (xA. sa) 

imi] K (A) =9 (xA, sa) . 
iCTf^^LfcaK(A) %ffll^rvX^81cO*^SA^0g 

[a33] C(A) -Ea(K(A) ; Sa) . 
iP^r-^Hi^fkilktCTBg#f[:Lfc0g^XE(k ; 

p) 7'-^tmmtmk^^x^mKA,B},crmmt 

L/cBg^XE (Ka.b ; k) ^^-)lSm^Blcm{iL. 
§®#Bfi. VX^SKB.A;&ffll^TE(KA.B ; k) 

k*fflt^TE(k ; P) ;b>e)^-;i/*35cP*«^ft:-r§ 
#BJc5*bTi^m-r§^"-;v:4:*8i^ft;-r^s^p«-;i' 

tpliiiaSiiLT. -trV^Tfix ^?$pi:'&l3can = pi-p 
Ls j|^(i#Afi. 0<xA<p-l^§SSExA^5^>^ 
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l^ZA] yA==exp(a : xa) (mod p) , 
^ft-»t. S«#BJi. 0<xB<p-l*§SSxB* 

[iS(35] yB=exp(a : xb) (mod p) . 

fi5Mm#Aoi DifsiA^^s. 35iff#Atca^osi 

(sa. va) ^iESe^ffll^r. 

[SC36] sA=exp(lA:e) (mod I. c. d(pi - 1 , p2 

JO - 1 ) ) , 

vA=exp(a : sa) (mod n) , 
tCTttSt. |pI«lC§<i«BCDI DltffilB;6^e>. Sfl 
#BtC©WOS (sB. vb) 
[tSt37] sB=exp(lB:e) (mod l.c.d(pi - 1 , p2 
-1) ) . 

vB=exp(a : sb) (mod n) . 

tcrn-su ^^^mm^A^^zf^mmB\c^±itcm 

(fcffU exp(a : x) ita^xmLfcm^^t) 

•T) . c<ot^. \Dmmmrj:nimjt^r^mmm^ 

20 S^#Ati (yA. vA)^33l€#A<Di.T^8ii: 

LXmmL. §^i#B(i (yB. vb) %S^#B<Di>ga 

fi. §M«Bi:fDHT*«iitc«^"r§gl»g^ffli^r. 

^i^(DW^mV$>^ (xA, sa) tSm^BO^IiSiT 

(yB. vb) 3b>e)^ -^X^aKA.B^. 
[S38] KA.B = g(exp(yB : xa) (mod p) . exp 
(vB : sa) (mod n) ), 

tcTf^^L. ^mmBit. ^^(om^mv$>^ (xb. 
sb) tmmmA<D'j^r^mx^^ (yA. va) ^ffli^r 

if? '^T.^^Kb.a^. 

[839] KB.A = g (exp(yA : xB)(mod p) . exp 
(va : sb) (mod n) ), 

mm^Aim=p>^-^i^^mmt^m^ti^^\^^smmictt 
Lxit. ^nb(osmmtmm^Am<D^^7s^mfi'^ 
r^^^m^Sk. trcit. mm^A<Dm^m (xa. sa) 

[SC40] K (A) =0 (xA. sa) . 

tcTf^^urciiK(A) ^m^^x'r7.^m<om^Sk^^ 

[|S41] C(A) =Ea(K(A) ; Sa) , 

m^mu mk(om^:^-^y^mc^\^^Xs 7'-^m^ 
mmiEnxi^^^ i,<oic-o\^^xit. mcic^^<D{[>mm 

M) ^iAmnt^mmmsm7)i^vxL.^c^^^^:!c 
M^mkizxmmtLfcm^^^tD'r) . 

50 ^mmk^^y^i^icmif. sm^Btomx^mic 
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P) t. x-^Bg^ftHk^-TX^ilKA.BtCTBg^ft: 

L/iffi^iE (Ka.b ; k) ;&^-;i/§<i#Bii:3^^b. 

SM#Bti. VX^HKe.A^ffll^TECKA.B ; k) 

M^SikT*Pg#{tLfc^*%Eo(k ; M) Xmt>t) > 
[S42] yA=exp(ai : xa) (mod pi) , 

^itSU §m^B(i. 0<xB<pi-i^ssS:xB 

[|8[43] yB=exp(ai : xb) (mod pi) , 
^finh (tzfcU expia : x) tia^xSLfcfil^g 
^r) . 

-tr > ^ -^dS^iail ^ L T. jMfi^ A 4o <i: B 

AO I Dlf« I A*^e>2SM#AtC@W<0*BS«lsA^. 
[S44] SA = Eo(r : Ia) . 

[St45] SB = Eo(r : Ib) , 

S^SrO. mm^Ai^±. yA^. |gS5SisAtc»/£;-rSi."P^ 
SI 

[?S46] vA=exp(a2 : sa) (mod p2) . 

(yA, va) ^mmmA<D'jimmtLx^BL. § 

fl#Bti. ys^. iKffig|sB(Cj^f£;-r§l.^rff1M 
[a47] vB=exp(a2 : sb) (mod p2) , 

(Dmiys. wB)^smB<D'j::mmtLx^mL. vt. 
m<Dm!iB.mtLx. 

ffli^T. ^^(om^ux^^ (xA. sa) t^m^Bo 
{[::mmx&^ (yB. vb) ;b^e.. vx^ska.b^. 

[SS[48] KA.B = g (exp(yB : xA)(mod pi), exp 
(vB : sa) (mod p2)) . 

ICTf^^U §fi#Bti. ^»<Dm^mx$>^ (xB. 
SB) ^il^fi#AOl^Pf1ilT^^ (yA. va) ^ffll^ 
T. vX^SIKb.a^. 
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[?gt49] KB.A = g(exp(yA : XB)(mod pi), exp 
(vA : sb) (mod p2)) , 

mm^Aimi'^-ji^^mmrm^tf^^^^^Mmic^ 
Lxit. ^nib<o§:m^tmm^Am(o^^7.^mfj^^ 
rs^m^Sfi. ^tcit. mm^Acom^m (xa. sa) 

imol K{A) =0 (xA, sa) . 
{CXimLtcmiA) %fflV^-T^X^rilO»^SA^Bg 
10 ^fttfc 

[S(51] C(A) =Ea(K(A) ; Sa) . 

^tiTv^^vx^H^ffi^c^hb (fc^L. EA(k; 
M) (iA;b^mit-r§lgSIIBg#7;^rf'JXi.lc<tO¥5: 
M*SlktCTB|^{tLfc)gm^^^-r) . 

^^;\,:^:$r(o^m^immthx. mm^Ait. 

iP^r-^^#fkilktcTBg^fbL/S:Bg^i:E(k ; 

p) 7'-^mmmk^^x^mKA.B\cxmmt 

L:fcBg^XE(KA.fl ; k) ;&;?<-;VS€#B Jc^lMU 
g®#Bti. •TX;$rSlK8.A^ffll^TE(KA.B ; k) f)'' 

br'-i^^mtmk^m^itL. ^^(cx-^^^ftsi . 
k^fflv^rE(k ; p) t^iE>^-Ji^^icF^m^itt^ 

#BtcJ^bTi3im-r^;'^-;Vi*ffi#<l:1-s«?^-^v 

pt^^mn = py'p2tmma^'j>r^L. SSa*5ci; 

i^^^ifmr^mmmmtL (rcnu N=i.c.d(pi 
-1. P2-1) x$>^. 't>^(om^mmxs>^fi^^ 

^;&Eo(k ; M) Tgbf) . 

iMfi^Aii:. 0<xA<p- 1 ^^gSExA^^Vi^TAJ;: 

[^52] yA=exp(a : xa) (mod p) . 
%imt. §<i#Bti. 0<xB<pi- 1 ^5M?StXB 

CS(53] yB=exp(a : xb) (mod p) . 
J&ltSb. -ty^^O^m^fHimtLX. jg<i#A*5cttf 

imm^Aoi ummuf^^^mmmAicm^com 

(SA. va) 

,[|S54] SA = Eo(r Ma) , 
50 vA=exp(a : sa) (mod n) . 
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/; 

B{cBW<oa(sB. vb) 
[St55] SB = Eo(r : Ib) , 
vB=exp(a : sb) (mod n) , 

j^<i#Aa (yA. va) ^mm^A<o'ji^mtbr 

gSU S^«B« (yB. vb) 5r§«#B<01>Bgai: 

fflV^T, (xA. sa) i:S««B© 

4^isa-e3b« (yB. vb) t->B>. YX^MKk.B^. 

KA.B = g (expCyB : xA)(inod p), expCvB : 
sa) (nod n)) . 

{cTfffigu s««B{is ^^(omsm-e&^ (xb, 

SB) tjiS^«A<Di»^MaT*-5 (yA. va) *fflV^T 
VX^faKB.A*:. 

(Si57] K8.A = g (exp(yA : xi)(md p). exp(vA : 
sb) (mod n)) . 

icTf^^U COi:t, Ka,b = Kb.a*WSU Itt, 

LT«, ■^*^6^0SS#i:itSm#AM£0^■vx^^a*^5 
45*^Sa, $fc«. jMfl«AOlMBa (xA. sa) 

[»58] K(A) =e (xA, sa) . 
{CTf^figL/-caK(A) «rfflt^T-TX^'a<0«^SA*« 

im9l C(A) =Ea(K(A) : Sa) . 

fbaE»fofc«)%ifT-Tx^'atfit!®*ii^. ^x:jfa 
i:i5^©ssiEa*>6^x^'a*f^fi2t-si:t*<, teti 

SnTV'«VX:5'a*ffi3CttL (fcfcL^ EA(k : 

M) itAmm^mmm.m^7)\^^vxL>ici:>j¥ic 

M«akfCTBi#{t:tfeie««r«fe-r) > 
B|#{kak«-7>^fAtcStf, S<i#Bi:OHT*«3i(c 

«wr«fisaiaw#isr;i/:JuxA*ffli.^T> 

XP*T-^'Bg#<taktCTHg#ftL^cBI^3i:E(k : 

p) r-^^Bi#^bak%•7;^^faKA.e^cTBi^^t: 

LfcB&^iECKA.B : k) %p<-;l/SffiSBtcHHiL> 
^^#B(i:, VX^aKB.A*ffll>TE (Ka.b : k) 
6T-^'«^fl:ak«:ffl^fbL, *P.»Cx-:f«#<ba 
k;&fflv^TE(k : p) *^&;<-;i'*5:P*a#ft'rs 

Cai*«l 0] ll*«4, 5, 6. 7. BtrzHQK^ 

vx^fa^wjaa^^-p, s«#Ats«#Bi:«Dffl-p 

CDteO] g(xi. X2) =h(0(xi, X2) ) . 
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[»61] 0 : Z/(p) xz/(n) ^ Z/(pn) 
( (x, x) -» x) . 

fi^mm^m^mt>L. z/(m) aeam^rjittsw 
s^ss^-atob, xaf-n^^nossjj^aifcfev^Tx^f^s 
7ci:-r-5»j3^a%at)-ro ) , -rx^a^rft^-r^w? 

[WS311 1] tm^A. 5. 6, 7, 8$/-ca9«i:43 
1/>T. VX^aj^*S!iaOtfT% jM^#AtS<i«Bf: 
70 OHT-«3itc«wr5M»gi:tT> 

[K62] g(xi. X2) =h (xi * xO . 
%*M»*fflVT (fc/£U hti/N-^/i/aMSs xi* 

X 2 « X 1 1 X 2 mmtfjsamm&i^t) , vx a« 

2] il««3, 4, 5. 6, 7, 8. 9$fe 
(i 1 1 tcfel-'T. 

®#{ba k «7 v^A»catf. B i:OMt?ftiiC 

ffiwr«*effia©#?sr;i':fyxA*fflt>T. 

20 iP^T'-^^^fUikKTW^fbLftaP^XECk ; 
P) fc^ r-^f^^^baktvx^faKA.BOi^fffiWSS 
SifPk*KA.B*Sm«BtCjS«L. S<l#Bti, -TX 
^a Kb. A k * Ka. BOSI^e^HSfD^IS^S C 2: (Ci: 

!?, f-^fBg^fbak^s^fbt, tbt^'f-i'^mt 

ak«rfflV>TE(k : P) A^S^-zl/^iP^rtt^^bf 

[is^js 1 3] mm^y hv-i'±T'yi-)i(Dms(s^ 

fiS B fCj^ LTiUffr 5 ^-7V3!C*Bi#{b-r Sft?P< - 
©IS««{*:A*ffll-'T, iS*3S 1 1 2 0«? 

^-;i/S^fb:??jitctJ!t\ mmmmmi»mwAPi-e 

l2J^«r^tT§ji#Offiffl-r5tt»«2»CjSet, Sffi 
igft#*^e.S&nTtrcjg€X«:ftJltt2*^c>S 
(l#Oii^<ifigf>ftlSlij«f*:Bli:(ii:/3L. fEfifi5i*Brt 

T'T-:?Bg^{bafcJ;tf ^--/i/^^Sc^rS^fbt- 5 c: t * 
<(0 ittj9i:-rsS?p<-;i'BS^fb73js6o 

[000 1] 

IC« t TSi^«rlSl± * -arfc*? P« -;l/Bg#fb73 ft »C M 
[0002] 

50 T-c;&34fb-ri)Ci:«:iS*lt LT, XS< TLinn.J.. et 


al., "Privacy Enhancement for Internet Electronic 
Mail:Part I. II. III. IV* .RFO-1421-1424, 1993J 

IgicOPEM (Privacy Enhanced Mail) ^^S^^tlT 

[0 0 0 3] p EMTti. nwatci^r^iae^R S A 

(##3S:i5 rR.LRive5t.A.Shamir.LAdleman. "A Meth 
od for Obtaining Digital Signatures and Public Key 
Cryptosystems" .Communications of the ACM. Vol. 21,1 

978J) ^mmh. T'-^oy^mtK^mn^w^x^h^ 

aSS^SIBf^DES roata Encrypt ionStandar 

d.FIPS-PUB-46.1977j ) ^fflV^TV>-5o 

[0 0 0 4] mmmkit^mmB\t^y vv-^^itL 
[0 0 0 5] Step 1. kity'-mmmv^^'^y^ 
mtt^o •r^t)'&. p(-;i/*XPcopg^5:Ci^v 

[0006] 

[S63] Ci = E(K ; P) . 

[000 7]Step2. A{iBcDl^gf"ia (ee, ns) ^ 
[0008] 

[S64] C2=exp(K : ee) (mod ne) , 
tt^o rcTzL. exp(a : x) iia^xSLfcffl^gt* 
•To 

[000 9] Step 3. A(iy-;l/*XP^^rff11fST' 
^^M'VV'aglSf ^fflV^TE^t. AO^ffiSdA^ 
i^P^SnA^ffll/^Tf (P) {CRS A^S^tT^^e 
t>-^. f (P) Ji:J^'rS§«3fcsgnA(P) 

[0010] 

[S(65l sgnA(P) =exp(f (P) : dA) (mod pa) . 

tt^o 

[0 0 1 1] Step 4. AtiCi. C2. sgnA(P) ?rBtC 
[0 0 12] Step 5. Bfii^O^Sr^dB^ffll^T. 
[00 13] 

[^66] K=exp(C2 : de) (mod ns) . 

[0 0 14] Step 6. BCiilK^fflU^T. 
[0015] 

imn P = D(K : Ci) . 

tc^t). p^-;i/*3iP^a^{t'ri.o 

[0 0 16] step 7. Bti^-;b*iP;t)^A;b^e>j^6> 

H (CA. nA) *ffll/^T. 
[00 17] 

[§j68] f (P) =exp(sgnA(P) : ca) (mod ha) , 
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[0 0 18] PEuici^^mmm^ti^^^^ti^o 
[0 0 19] (1) ^^i403tii*^^. v'-^^mm 

[0 0 2 0] (2) RS ASg^^rfflV^fcaiaSITtis 81 
tE(iJS:t\ ^Ofcisb. PEMT«. R S A^ffll^/'cx>r 

[0 0 2 1] (3) PEM^C^3l^T(i. ^yh'y-^O 

{f. ffJffl#Ai:?iJffl#BtDaA^-aLTV^SCi:tc. A 
A^BcDl.^gf1fil3b^^M*H>f<i:. AiiBlc^^lj-r^trc 

[002 2] 

[^H.g3b^«i*tct:^^-r5SS] *^^i£Dg6qti. mm 
;^ -}\^(omm^^ ^ xs^mmw5\^^^i s -ir 4^ ^ u x ^ 

[0 02 3] 

[0 0 2 4] M:W^mmy5m<D\'otLrit. mm^k 

•t>^ti. ^^pi:^fiSc?S(n = pi-p2i:giaa^i.^Bg 
[0 0 2 5] mfi^Mt.. 0<xA<p-l*^S^xA 
[00 2 6] 

50 [St69] yA=exp(a : xa) (mod p) . 
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[00 2 7] 

[^70] yB=exp(a : xb) (mod p) , 
;&H-Jfr§o fcfcL. exp(a : x) {ia^xSbfcfil^ 

CO 0 2 8] 0't>^^(D^^mm 

AJC@=&08I (SA. va) ;&iES(e^fflV^T. JO 
[0 0 2 9] 

CSC71] sA=exp(lA:e) (mod l.c.d(pi- 1 . p2 
-1) ) . 

vA=exp(a : sa) (mod n) , 

tcTtf-jJu mmic^mmBco I Dmm i ba^?*. §m 

mB\C^^COm (sB. vb) 
[0 0 3 0] 

[S72] sB=exp(lB:e) (mod I. c.dCpi - 1 . p2 
-1) ) . 

vB=exp(a : sb) (rood n) , 20 
fljf^o ftf£U \. c. d (x. y) (iSSx, ycO 
[003 1] CiDtt. I DltSA^S^ntfJ^lC'r^iK 
[0 0 3 2] 33S^#Ati (y A, va) ^mm^AO'j^i 

mmthxmmL. ^mmBit (ys, vb) ^^m^B 

[0 0 3 3] ®^Xi5?jl«WJ!lii 

mn^A('t. ss^Bt<Dmx^micumt^m^g^ so 

fflO^T. a^:^cDfiJffia-pfe5 (xA, sa) i:§M#B(D 

^^r^iST^s-s (yB, vb) ti'^. ^Ts^my^k.h^. 

[003 4] 

[S!e73] KA.B = g (exp(yB : xA)(mod p), exp{vB : 
sa) (mod n)) . 

Kx^^L. SM«B(i. a^oHsffinr-fe^ (xB. 

SB) ^2§^#ACDi>r?ai8IT*feS (yA, va) ^ffll>T 
v;^^8IKb.a^. 
[0 03 5] 

[W^l KB.A=g (exp(yA : xB)(mod p) . exp 40 
(va : SB) (mod n)) , 
\tX\mt^o 

[0036] CtOi:t> Ka.b = Kb. A:^^^xZ:-r§o 

[0 0 3 7] 3g(i#AtilTF^-;i^^jMfi-r^«i 
(xA. sa) .tjji^fiScMaeA^e*^ 

[0038] 

[St75] K(A) = 0 (xA. sa) . 

tCTf^J5JcLfc8IK(A) ^m\^^X^7.^^(D%^SK^^ 50 
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[0039] 

[§t76] C(A) =Ea(K(A) ; Sa) , 

^nrv^^avx^H^ffi^o /c^ft. EA(k ;m) {tk 

\Lx^n\tLrz^^^^t>to 
[0 0 4 0} ®^-;i/*s:iOBga#{tias 

brcBg^XE(k ; P) i:. x-^'Hg^ftak^vx^? 
aKA.BtcrPi#<kUfc^^:fi:E(KA.B : k) 

[00 4 1] §m#Bti. VX^faKB.A^fflt^TE(K 
A.B : k) ^^e-r-^^^fbSlk^&S^fkL. ^e>tcx 
-^Bg^ft:llk^fflV>TE(k ; P) A^e.>^-/i/*3icP 

[00 4 2] 

[f^ffl] *^Mtc*3tts«?^"-;VHi#{k7?jiT*«. « 
\.^x\tm!snt\.x'^7.^m<Dh'^w!st\.xtsmi. s 

[0 0 4 3] f fc. I Dlf^(ifJffl# («?^-;1/C0j3I 

tmm^i^'&'hi^rmmm(om,^^^nr^r>ctx\ m 

[0 0 4 4] 

[0 0 4 5] li Hi. *^WC>IISSWlOi/7.x A^^^ 

[0 0 4 6] 02tis *^WtC43tt5«?P«-;PBi^fk 
[0 0 4 7] 03 {i. ||ffls^Jl;^^e.9tC4bnt§fiJffl#« 
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18 


[0 0 4 8] ^4 ti. -tr>^iJgH200OF*3g{5«St^?N 

202. ffi^8lf^^^B203. illi[#g204^ffl^Tl^§o 
[0 0 4 9] 0 5(i. :^-K400CDrta5^^^^'ro 

-F4ooti. sLiS(fi5t§§40K -<t§mmo2. m^^m 

03. igg§§404. 0g«^fl:SH4O5. M^yi/rL|tS:§§40 
6. 7^^U407, ffi;^Sfi408^<i^TV^§o 

[0 0 5 0] ^6 ti. %mm\ QKi^^f^nmmm^w 

SHSOK 3imSB502^1Sx.Tl^§o 
[0 0 5 1 ] ^7 h7-^CDfiJffl^(iiimi9liStC«gg$ 

500) ;&ffll/^TftfiCi=PJffl#ffliJS@100 (;^-F400i:^Jffl 
#ffi!|gS500) ;&<^ffl-r^SiJO^iJffl#tCj*tTm^;^- 

[0052] CiOi:tx S^^-;i/C>Hif^fl::5atcov^* 
• xajez s.t o<xjij<p-i 


[0 0 5 3] ZfiSISSS^gfeU Z/(n) (iSSCn* 

*J^^tc4ot3'Sx^«S7ti:*rsfJ^!li^^t>'ro t 
/c. exp(a : x) a ^ xSL/cfit^StJ-fo 
[0 0 5 4] ^>^y Y'y-^(Dnm^<0 I Dlf^tif 

t e^y YtxTT-^t^^ti^^'t. mmm(o i oit^tiz 

/(exp(2 : t) -1) (DTzt^^^^tt^^X^t^o C(D 
t^. =PJffl#£0 I Dlf^(Om'&A^. A=Z/(exp(2 : 

t) -1) t^^-r^o 
[0 0 5 5] (mmmi) 

Bl00rtOgLS%£fgl01:fe<fcrf^tSSS102^ffll^T 

[0 0 5 6]*B^8l: 
[00 5 7] 
[?S77] 
for j = 1 . "f n. 
[ISE78] 


[00 58] 


• y A j =exp(a : x xO 
fcfcU pti^K. a(iO<a<pr*Z/(p) 

[0 0 5 9] ^^tc. ^yhu-^izmm^tirz^im^ 
ligH00F*gtcti[Rl-OiKffiliBi^^7;i/dryXA^rt 

tg^fkb/cigm^^n^nECK ; M) , D(K : M) 
[0 0 6 0] ®v;^^8l(7)J^=t 
J^LTI|?P^-;l/^3l»?fcl\ C^OgWiDTT% A. B 

[0 0 6 1] AitA<Dmmmmmmk[^(D-<^mni^ 

i^r^lilyBj (j = I. n) t^^^Ts^^KA.B^. 
[0 0 6 2] "fO 
[St79] KA.B = n{exp(yBj : xAj) (mod p) I j = 
1, n} , 

icnmt^o fcfcLs iB^iooA^fcov^Tti. m.^<D 
1006 31 mmicLx. BitB<Dm^mmM\mfy 

i7:)^tSW§g102Bi5<fcDW^104B;&ffll^Te^cO^gS^ 
mxBstA<D'jirmyM M=U n) ;b^e)VX^ 

. [00 6 4] 

[?S80] KB.A = n{exp(yAj : xsj) (mod p) I j = 50 


(mod p) for j == 1 . * 
1, n} 

[0 0 6 5] 

[|S81] Ka.b = Kb.a, 


[0 0 6 6] ^etCv Ati€^p^-;v^i3m-rs«a^^^ 

^StO^-g-SA. ^fcti. AOl&S^lfffixAj = U 
n) A>efiJffl«fflOgBlOOAF*gtO||*^Si103Ati:<fc»? 

UK (A) ^imu ^m^itmm^obk^m^^xmK 

(A) tc<i:DSA^Pg^{bbfc 
[006 7] 

[St82] CCA) =E(K(A) : Sa) . 
§C^i&<. ^^U107A{C|S«^nTV^SVX^gl^<I 

[0 0 6 8] ®^-;L/**<^^^ft; 

Ati:. ?iJffl^{|iJgB100ArtiDaS(^5feSg101A*ffll>Ta 
S(r*^t>\ r^A;^i:bTil^fiSctBl03A;b^e,T-^5i 
^{Liik^rf^^-rSo p<-;l/*iP^Bga^{t^M105A 

[00 69] 

im^l Ci-E (k ; P) , 


-10- 


(11) 


8-251156 


J9 

e^ftJI k K*. B T'©#ft L fc^^X C 

[0070] 

Ca84] C2 = E(Ka.b ; k) . 

[00 7 1] A{4. iifflSM108A%fflV^TCitC2^B 

CO 0 7 2] ®^-;U*XoS#{b 
B iisenr tfc c t C2 jcSLTx 

B.A<fcO^ 

[007 3] 

[SC85] k = D(KB.A ; C2) , 
[007 4] 

[SC86] P = D(k ; CO . 

[007 5] (SS6fi?»J2) lli6£glJ2r*(i. -feViJf^D^Fft 

[0 0 7 6] (D*iB 

[0 0 7 7] IT^IfJ^: 

•pi; ^S, 

• p2 = 2 qi q2+ 1 ; 

• aiGZ s.t 0<ai<pi 


20 


ai(iZ/(pi) 5(? 
a2GZ s.t 0<a2<p2. A^O. ai{J:Z/(pi) 


• q 1 , q 2 e z : ^SS. 

h7-^iO§=PJffl#A(iipJffl#(|iJgS100F*iOaiS 


[0 0 7 8] IB^a: 
[0 0 7 9] 

[?S87] •xaeZs.tO<xA<pi-l. 
[0080] 

[|S88] • yA=exp(ai : xa) (mod pi) . 

0 : Z/(pi) X Z/(p2) 
(n = pi.p2) 0 CCr\ xit^ 
n€nofJ^SStc4bnt5 x;&f^S7t:i:-r§«*S^^t) 

■To 


[008 1] -tr>^f (i. -b V^?fflySH200rt(Daj^af^ 
^^B203;&ffli^T. 
[008 2] 

[^89] ed = l (mod l.c.d(qi-l. q2-l) ) . 
[008 3] 

[3S90] s X =exp( I A : e ) (mod p2 — 1 ) . 

[0 0 8 4] C(Ot^. 
[008 5] 
[IS91] 

SA=jts/x if I A =?t I ^ eA = Z/(p2- 1) . 

[0 0 8 6] (3)*^X^aiOjt^ 

f.7-^cr>?lJffl#A(*. (yA, va)^ 

AtDi>f^iai:bTSg^ff=9:5o fcfcL. 
[0087] 

20 [S(92] vA=exp(a2 : sa) (mod p2) . 

m^^n^nE (K ; M) . D (K : M) T*st»-rc 

[0 0 8 8] h7-^iDPJffl#A. BiCOt^T^ A 
(iBlCj4LTm?P«-;l/^2S*?/cl\ C(DgWiOTT% 
A. Bit^X(D^m^^^t^ 

A A cO?fJffl#ffl!l^S100AF*9tO^ t Sg§g102A i: }|I3¥§§ 
(xA. sa) i:BcDi.^P^Sl (ys, vb) A^e-^x^aK 

A.B^s 

[0 08 9] 

[Sc93] KA.B = g (0 (expCys : xA)(mod pi), exp 
(vB : s a) (mod p2))) . 

^ t MS§g 1 028 ^ Jf §5l 04B i: M 'y a Its gg 1 0eB^^ffl 

i^r. Bo«ja?a (xB. SB) tAco'j^imm (yA. 

va) ;b^6'7X^SiKB.A^. 
^0 [0 0 9 0] 

[^94] KB.A=g (0 (exp(yA : xb) (mod pO , exp 
(vA : sb) (mod p2))) , 

[009 1] 
^ [IS95] 

Z/(n) ( (x, x) ^ x) . 

[0 0 9 2] C(Dt^. Wesb^tCs Ka.b = Kb.a. 

50 [0 0 9 3] ^6tC. A(im?P^-;l/^32im-r^*»^*^ 
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#iJgH100Art<7)il4figS§103AlCj:?)aK (A) ^IS. 

Bga^{tSE105A:&ffll^TSIK{A) KJ:OS»«raS 
mtLtzC(A) =E(K(A) ; Sa) . ;<t'J107A 

^•U107AlCfe«$nTV^5-7;^irii*<iao 10 
[009 4] ®;?<-;l'*XO«#fb 
A{i> fiJffl«fi!lSB100A|^(^a8St%488101A«:ffll^Ta 
Si! r «rStf. r «:A:^ t LTa3fe)«S103A*>e.v'-^'flf 
^{kSk^f^^-rSo ^-;l'*3^P;&©a^lfcSBl05A 
:g:fflV^T-r-^Bg^{tJI k K J: ») Bg^lb L^c^^i C 1 

Ci = E(k : P) . CTf^^-rSo 2 5.1;:, Bga# 
ft^S105A;&fflV>T-r-^'^^<l:Sk*-7X5fgKA.B 
T'Hg#<kLfcBg^S:C2«:. C2 = E (Ka.8 ; k) , tcT 

[0 0 9 5] A{i> mmmm^oBA^m\'^rc} tci^B 20 
[0 0 9 6] ®^-;i/*5:c>S^{b 

B.A,tt). k = D(KB.A ; C2) . K:rx-^^#ft:lik . 
^a^fkt. :^^tcx-^sg^fb8ik^fflt^T^ P = D 

[009 7] (Mmm 3 ) ^mm 3 (j:. ^sfi^tj 2 tc*5i^ 
V A ) :^nim2himr^^m<omm^^K>\i^t^- so 

[0 0 9 8]®?Pii 

fcrft. loaf fisKffiS!fMaa203rttcis*fl?nTv^ 
[0 0 9 9] <^mmn- 

•pi; ^St, 

• p2 = 2 qi q2 + 1 ; 

. aiGZ s.t 0<ai<pK aitiZ/(pi) 40 

• a2GZ s.t 0<a2<p2^ ;^JO^ ai(iZ/(pi) 

• q 1 , q 2 G Z ; 

^4§gioife<fcD*-<^*»:Sgi02;&ffli^T:^j>?:iDll^<^^'r 

So 

[0 10 0]«Sa5l|: 

[0 10 1] 50 


i|$ga^8-2 5 115 6 
[|S96] • xaGZ s.t 0<xi<pi-l. 
[0102] 

[|S97] -7^=6X0(81 : xa) (mod pi) . 

[0 10 3] ■tr>^ti:-tr>^<llgl200rt£O«^S;«{^^ 

( 1 ) I A + i A (mod p2- 1 ) \mi5m^>. 
(2) lA + iA (mod p2"l) ^ln + x^i (mod 
p2- 1) if X^ii. 

[0 10 4] 
[^98] 

sA=exp(lA + iA) : 1/2) (mod p2-l) 
^tt»LT^ s A A ^C$±tcBE^-rSo 

[0 10 5] C<Dht. s A s M if A 

[0 10 6] Q-^Ts^^iOn^ 

hV— i57(OfiJffl#Ati:/^i^h;V. (y A. va)^ 
AOi:^r?f1Sli: LT§^^f7^^o fc/^U vA=exp(a 
2 : sa) (mod p2) . ^yhU-^ic^mt 

^^m^^tsm^^tLrc^^m^ttl^nE (k ; m) . d 
(K ; M) xmt>to 

[0 10 7] ^yhU-^omm^A. BtCOl^Ts A 

A tj: A <Dmm^mmm^oom(o^^mM^^o2Atmw?s 

(xA. sa) tB(0'j>mm. (ye. vB) ;b^^vX^?aK 

A.B^^ 

[0 10 8] 

[^99] KA.8=g (0 (expCys : xa) (mod pi) , exp 
(vB : sa) (mod p2))) . 

l^T. BCOm^M (xb/ sb) tACD'j^fi^m (yA. 
va) tt^ib'^T.^mKB.^^. 
[0 1 Q 9] 

[^100] KB.A = g(0(exp(yA : xb) (mod pt) , ex 
p(vA : sb) (mod p2))) . 

[0 110] 

[gstioi] 
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0 : Z/(pi) xz/(p2) 
3S:^I^S¥»*^tJ'f (n = pip2) o CCX\ xlt't 

to 

[0 111] C<Dt^. m^MC, Ka.b = Kb.a, tf^^ 
[0 1 1 2] ^e>tc^ Atil|^^-;l/^3Mmf ^tS^Tb^ 

^{SlSHlOOAf^^Oa^figS103AtC<fctiaK(A) ^f^J« 
U Bg^^{kSHi05A;&ffli^raK(A) lC<i:t) Sa:^© 
^ft:LfcC(A) =E(K(A) : Sa) . p<^U107A 

•tV107AJcE«^nTV^S^X^a;&^^o 

[0 113] (5)p<-;i/*XiOHg#{k 
Mt. ?iJffl^ffl!lSS100ArtoaiS5£3tS101A;g:ffll^Ta 
?SrJ&gtf. r^A:^a:LTa*^§gl03A3b^e.-r-^fB& 

^fkak*f^fie-rso ;^-;i/*xp^Hga^{tssio5A 
ct = E(k ; p) , tcTf^fiSc-r^o mm^ 

{bSBlOSA^ffll/^T-r-^^HS^fkllk^vX^JilKA.B 
T'Bi^itL/ciW^XCa^. C2 = E(Ka.b ; k). JCT 

[0 114] Ati. ii^gfil08A:£rfflV>TCii:C2?rB 

[0 115] ®p«-;i/*XOS^{k 

B.AcfeD. k = D{.KB.A ; C2) . icxT-^mmmk 

^mmtL. :Atcx-^Bg#ft:8lk^ffli^T. P = D 
(k ; Ci) . tcT. p<-;b*^P^«^fk-r5o 

[0 116] (mmm4) mmm4i,t. mmmz. stc 
[0 117] omM 

[0 118] 'j^l 

• pi 

• p2 

• aiez s.t 0<at<pK :^)^-::>. aUiZ/(pi) 


2-^ 


a2€Z s.t 0<a2<p2. A^O. ai(iZ/(pO "tr 


Z/(n) ( (x, x) ^ x) , 
Ai3<ttfarez. 

■fe > ^ iO^MIf ^Tfe s *gsa0i^7;vdru X A tc <fc 

t). ^3S:M^I|kTBg^ft*5J:lf«^ikt/c:$£^^^n 
^nEo(k ; M) , Do(k ; M) X^t>to 

[0 119]:^^^;' hu-i7(D^mmm ximmmmm 
ioof^oaia%4#§ioi4o<i;t;-^t*^§§io2;&ffli/^T^^ 

[0 12 0] mmm : 

/O [0 12 1] 

[ai02] • xxGZ s.t 0<xA<pi-l. 


' z/(p2-i) (07i^mtit^mmm^^7)i:^*vx 


[0 12 2] 

[St103] • y A =exp(ai : X A ) (rood pi) . 

[0 1 2 3] -b>iS'ti. ■feVi$fffl!lgH200rtcO«J^SIf^ 

AEga203^ffli/^T. mm^xiDi umm i a tc«t 

20 T. 

[0 12 4] 

[S104] SA = Eo(r ; I a) eZ/(p2-l) , 

[0 12 5] C(Ott. 
[0 12 6] 
[SlOSl 

sx-^S(i if I A =5fc I /I eA = Z/(p2- 1 ) . 
[0 1 2 .7] (3)'^;:^t5?8ICi^tW 

30 hu-^(omm^xit. (y X, va)^ 

A(0^^r^1Sli:LT^S^tT^^o /cf£U vA=exp(a 
2 : sa) (mod p2) . ^^ic^ ^^yhU-^iC^mt 

l£S*5<*;t/^^fl:t/c^«^^n^nE (K ; M) , D 
(K ; M) T^t>to 

[0 12 8] ^^yhU-^Omm^A. BtCOl^T. A 
^B{C*fLTIi?^-;l/^3l*):^cl/\ C(Dg6^CDTT% 

40 A, B(i:^A£0¥/i^SfT-rs 

A A OfiJffl#ffl)gH00Af^t0^tS^§5l02Ai:igK8§ 
104Ai:/N'y>^^itg:§g106A;&fflt>T. ACO^iJffig! 
(xA. sa) i:B01>r^1ii (yB, vb) ?b>6vX^ilK 

[0 12 9] 

[3S106] KA.B = g(if»(exp(yB : xa) (rood pi) . ex 
p(vB : sa) (mod p2) ) ) 

50 fflv^T. ^<owBU (xB, SB) tk<o{i^mm. (yA. 
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va) t'^^^T.^^Y.i.k^. 
[0 130] 

[^107] KB.A= g (<^^(exp(yA : xb) (mod pi) , ex 
p(vA : sb) (mod p2))) . 

0 : Z/(pi) xz/(p2) ^ 
35:§lRlS¥^^St)-r (n = pip2) o CCT% x\t^ 

[0 1 3 2] cltOi:^. Ka.b=Kb.a. 

[0 1 3 3] ^?>tc. A(iS^^-;i/^i^^1-Sil^*^ 

#{|ISH100A?3^7)8t^^^103AtCcfc?3llK(A) ^f^jS 
L. ^«^{bS«105A^fflV^r8lK(A) tC<fcDSA^B§ 
^{bbfcC(A) =E(K(A) ; Sa) , ^^rU107A 

^U107Atcf21g?nTi^5vx^Si^M'5o 
[0 13 4] ®p^-;l/*S:0®^ffc 
k\t. flJffl#ffliISSlOOArtcoa»^4§gl01A^ffll^Ta 
Sr^Sr/^ r%A:^i:tT8l4jacSil03A:6^e>x-:$'B& 

#{bllk^f^fig-r§o p^-;i/*3i:P^Bia#ft:^Mio5A 
Ci = E(k ; p) . Jcrf^fig-rSo Bga^ 

fbSBI 05A;& ffl V^T -r- Bg^fbS k ^ SI K A . B 
T^Bg^{bLfcBi^35:C2^^ C2 = E(Ka.b; k). tCT 

[0 13 5] Afi. ii<ig§108A;&fflV^rCi^C2^B 

[0 13 6] (S)P<->'l/*XiOa^{b 
B(i3SSe>nTtrcCii:C2tC*fLT. BO?iJffl#ffllSg 
100BrtOBg®-^fbgH105B;&ffll>T. ^■r^ VX^SK 
B.Act?). k = D(KB.A ; C2) , (CTr-^Bg^fbSlk 

;&«^fbU ;>:{cx-i$?Bi^lblSlk;&ffli>T. p = D 
(k : Ci) . tcT. p«-;v*:iP^S^fbf §o 

[0137] mmm s ) iissfi?»j 5 ^tm^m 2 <omm 

[0 13 8] (DW 

^gg202*3<fcl/ig^S204^ffll>T;^<Dli^^f1^^-r§c 
[0 13 9] i.^r^HS«: 

• p ; ^IS. 

•n = q-q\ 

• aez s.t 0<a<p. a(iZ/(p) T'Mte 


^6 


[0 13 1] 
* [^108] 

Z/(n) ( (x, x) x) . 

• q. q'eZ s.t q-l=2 f 1 f2. q'-l 

= 2 7)1 Tj2(f 1. f2. Tji. rj2 ; , 
•aez s.t afiZ/(q) , .Z/(q') mm 

[0 14 0]ffiffi^: 
[0 14 11 

[3S109] •xAeZs.tO<xA<p-l. 


[0 14 2] 

[SllO] • yA=exp(a : xa) (mod p) . 

[0 14 3] ^y^\t'ty^mmm>^<om^m^^ 

SB203^ffll/^T^ ed^i (mod M) . %Se, 
f^j^cU 5pJffl#At01 Ditffll A^C^^LT^ SA=exp 
(I A : e) (mod N) , 
[0 14 4] 

[laill] vA=exp(a : sa) (mod n) . 

^n-fictr. ( s A , V A ) A tcs^tcEflj-r 

i»o /c/cU M=l.c.d(^i- 1. f2-l. TJI-l, 
7J2-1). N = l.c.d(q-1, q'-l)o 
30 [0 14 5] CCOirtv 
[0 14 6] 

[SE112] sx^sn^n^yx^vn if I a^ I m 
eA = Z/(N) . 

[0 14 7] ®VX^?8lfiO«^ 

h7-^iO?iJffl#Ati. ^i'h^U (yA. va)^ 

[0 14 8] ^6ic, ^^yY'y-^\c^m.i£nrznm^ 
?t^fbLfc*£S^^n^'nE(K ; M) , d(k;m) T' 

[0 1 4 9] h7-^i7)flJffl#A. BtCOV^T. A 
(iBtilJ^LTll?;?^-;^^^^!?/^:^^ c<DE^(D'rr\ 
A. Bti:^^o#li|l^*tT-r^ 

A (J: A C[)?fJffl#«JSS100ArtcO-C^^»#gl02AtiS»gg 
104Ai:/Nyi^^lt»8gl06A*fflt^T. AOffiffiSI 
(xA, sa) ^BiDl.%1SI (yB. vb) *^e»vX^8lK 

JO A.B^> 
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xa) (mod p) , exp 


[0 15 0] 

[SS[il3] KA.B = g(4)(exp(yB 
(vB : sa) dnod n) ) ) , 

i^T, ii^©»ffia (xB. SB) tko'mm. (y*. 
va) A^ev^^faKB.A*, * 

« : Z/(p) xz/(n) ^ Z/(m) 
%SIWl!¥»*a*3-r (m=pn) . CCTn x«4^-n 

•r, ■ 

[0 15 3] COfct, W6*^tC. Ka.b=Kb.a. 

[0 15 4] ?6fc. A««?;<-/l'%)5l«-r«ti#A^ 
#Vf<Jffl«ti:-?V>T{4, ■¥-nP.©ipJffl«tAi:<DH<DS 
v;^i»ai<D«^SA, Sfcti. A(DfiSffi1SffixA*^6fiJffl 
#lilSII100A(^<oa£fiic^103A(Cj:!?aK(A) «f^^ 
U W«#<bfiil105A*ffll/>TSK(A) K:J:t)S**B| 
^{ktfeCCA) =E(K(A) : Sa) , p<^^'J107A 

ti) io7Aici2ti$nTV'S^^^?a*<5 3« 
[0 15 5] ®p«-;i/*3toai^<l: 

Att. ifiJffl«fi|gflltOOArt<OSLa%4§ll01A«rfflOTa 
ar*atf. r%A^tLTa4fi!tS103A*>e,x-^'© 

^fbak*f^)S-r«. y-;i'*3S:P*sga^{kgHi05A 

«:ffll/>Tx-^'fl|^{ka k »c J: t) ©^{t LfcHg^Jt C i 

ci=E(k : p) . \cx^m^o *efc, Bgtt# JO 

«:SB105A*fflV^Tr-i»Bg#{ta k *VX^aKA. 8 
1?«#ftLftBg^3S:C2«r, C2 = E(Ka.b : k). fCT 

f^fiEfSo *e>»i:, Bia#{bssio5A*ffl(,^Tx-^e 
#ft:ak«v;^^faKA.BTflg#{ktfce#3S:c2«. c 

! = E(Ka.b : k) . KTf^figf «. 
[0 15 6] A«. amSHl08A«-fflt>rCii:C2«:B 

[0 1 5 7] <5);>(-;l/*S:o«^fl:: 
B.Aj:t). k = D(KB.A ; C2) . tCTr-iJ^Bg^ftSk 

^a^ffcu nz'f-mmtm.k^m\^^x. p = d 

(k ; Ci) . tcT. ^-;i/2)s:3S:P^«^il:t- So 

[0158] mmm 6 ) ^SE<?ij 6 {mmm 3 os2;?iiK 

[0 15 9] (DlPil 

TztiL. mLf^tmmmmmmmzi(&mtnxh^ so 


xb) (mod p) , exp 


* [0 1 5 1] 

[^114] KB.A=g(0(exp(yA 
(vA : sb) (mod n) ) ) , 

[0152] 
[SI 15] 

( (x. x) x) , 

[0 16 0] l^^gBlf^: 

• p : ^a, 

• n = q-q', 

• aez s.t 0<a<p. f3^^. a{iZ/(p) xmib 
•q. q'eZ s.t q- 1 =2 f I f 2, q'-l 

= 27JlT/2(fl. f2, TJl. 7J2;^S), 

• aGZ s.t a(iZ/(q) , Z/(q*) 

[0 16 1]«^S5a: 
[0162] 

[S:ii6] - xjiez s.t 0<xA<p-i. 

[0 16 3] 

[St117] • y X =exp(a : xi) (mod p) . 
[0 16 4] -tr>^(i-feV^ffl!lgS200f^tO*gSggif^« 

mm203^m\^^Xs mmmxoi oit^ i x \cnLx. 

(1) n + i A (mod N) i>t¥:^m^.. 

(2) I A + i >! (mod N) I p + i II (mod N) 
if X^fi^ 

[0 16 5] 

imm Si =exp(I x-\-.\x 
V X =exp(a : s x) (mod n) , 
miWLX. (sa. va) ^?iJffl#AtC?c±tC 

So 

[0 1 6 6] CC7)i:t. W6?!)HC. sx^sy. v x =^ 
vp if A^^. ;b'^^S:fSo 
[0 16 7] O'^T.^^CO^^ 
^yhU''^<omm^Xit.^^h)l(yx, va)«: 

[0 16 8] ^etc. hy-i'jcs^^nrcWffl^ 


1/2) (rrwd N) 
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30. 


«^{k:Lfcie*«rf-n-PnE (K : M) . D (K : M) f 

[0 16 9] ^'V h7-i'OfJffl«A. BtCOt/^T« A 

A, Btti^o^m^iifT-rs 

A fi A OfiJffl#iJgBi00Art©^tS»igi02Ai:g|St§g 
104Afc-'N>;'->rilt»S106A*fflV>T^ A©«5ffia 
(XA. sa) tBOiiBSa (yB. vb) *^e)V:^^faK 

A,B%, 10 

[0170] 

[tSlig] KA.B = g (0 (exp(yB : xa) (mod p) , exp* 

: Z/(p) xz/(n) Z/(in) 
^SiaiSfi:^*^*)^ (in=pn) . CCt?, xtt^-tl 

f, 

[0 17 3] COtt, We.*^JC, Ka.b = Kb.a, *<fi)c 
[0 17 4] Atift^^-Zl/^jUffl-rS^^*' 

^i/^fiJffl#ti:ovT«, ene.©ipJffl#fcAi:©M<oS 20 
vX^fgO^^SA. Sfctt. AO«5ffi1SffixA*^P.fiJffl 
#{|!lSgS100A|^coa£^^103AK:J:>7»K(A) ^f^^ 
U Bia#fkgS105A*fflVTaK(A) »Cj:OSA*Bi 
^{t:L/S:C(A) =E(K(A) : Sa) . ;><t'J107A 

€■ 'J 107AICfS1i*nTI/''5TX:J'S€:ffi3 o 
[0 17 5] <S>:^-)\'^1l.<0^mt 30 

Alt. ftjffl#ffl!)aBiooArt<oaa^^ggioiA%ffli/'«Ta 

Sir*gt>% r*A:^i:tTa^J5gei03AA^P)X-^'Bg 
^ftak^-f^figf S. ;<-;l/*3S:P*®«#{kSB105A 
;&ffll/^Tx- ^fflg^fta k fc J: ») Bt^fk LfcBi^A C i 
Ci = E (k ; P) . JcTltfig-rSo B§m 

^fbaH105A*ffll,Tr-:5'Bi^fka k «rvX^aK 
*.BT-ffi#{kLrcBg#35:C2«:, C2 = E(Ka.b : k), fC 
TfMfSo *P.fi:s B&«^{bSS105A*ffll,^Tx-^ 

©#{t:ll k ^TX^fSKA. b T-e^fbL^-cBi^i C2 

C2=E (Ka.b ; k) . tCT{lFfi!c-r«o 40 
[0 17 6] Afi, iHigB108A«:fflV>TCii:C2*B 

[0 17 7] ©^-;i^*5t^o«^{t 
B(ijgG>nTtfcCi^C2tC«tT. BCD?iJffl#tJSg 

B.A^?5. k = D(KB.A ; C2) . iCX'f-^^mtmk 
*tt^ftU ^AtCx-^^^ftak^ffll^^T. P = D 

(k ; Ci) , {CT. pf-;i/*iP^ffi#{l:f So 

JO 1 7 8] (iiffi<?ij7) mmm7immm4coti!:^}& 


*(vB : sa) (mod n) ) ) . 
\ZX\mt^o nmK. B(iBtOfiJffl«ffi!l^eiOOB|^cO 

1>T. g^oaffiH (xB. SB) i:A01^P^1gl (yA. 
va) )b^e»vX^8IKB.A;&. 
[0 1 7 1] 

[IS120] KB.A=g(0 (exp(yA : xa) (mod p) , exp 
(vA : sb) (mod n) ) ) . . 

[0 17 2] 
[IS121] 

( (x. x) ^ x) , 

[0 17 9]®tPii 

^gg202^3<fcD'dl^§§204;&ffll^r*Olfa^{^fig"r So 
CO 1 8 0] i.^r^11WS: 

• p ; ^3S. 

•n = q-q' (q. q'^ ^S) . 

• aez s.t 0<a<p. a(,tZ/(p)Xmih 


• z/(N) co7c^iti:/a-rs^BgBa0g^7;i/rruXAfccfc 

. aez s.t afiZ/(q) , Z/(q') 
CC"??. N = l.c.d(q-1. q'-l) tt^o ^fc. 

t). ¥5:M^slkT0g^fi:43<fctfa^fbLrc)fg^^^n 

^nEo(k ; M) , Do Ck ; M) Xmt>to 

[0 18 1] ^^'y hu-^(D^mmm xmim^m^m 

[0 18 2] KJaSSl: 
[0 18 3] 

[IS122] •xAeZs.t O<XA<p-l. 
[0 18 4] 

[JS123] • y ; =exp(a : x a ) (mod p) . 

[0 1 8 5] 'ty^it't>^m^m2oommmm{m 

g@203^fflt^T. ?iJffl# At7) I Dlta I X 
[0 18 6] 

im2A] s A = Eo(r ; I a) GZ/(N) , 
V A =exp(a : s A ) (mod N) , 
^ttWLT. (s;, va) *fiJffl#AtC$^tcE^'r 

So 

[0187] CCOt^. s X fi and va^v// i 
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=A=z/(N) . A^^sfsctfcas-r 


f lA^Id 

5, 

[0 1 8 8J ©VX^SOrt* 

h7-i'OfiJffl#A«. '^i'h;U (yA. v^) i& 

CO 1 8 9] ?P.»C, ^-y h7-i'(CgiS!^n/-cifiJffl# 

ffl!iSHiooi^K:aiBi-©*ea5aBi^?S7;i/3"'; XA*i*g 
iaL^Bi«#<ksiiio5*^fe»3, c(DmmmmJk7)v 

a^fl:Lfte*«:^-n^'nE (k : m) . d(k : M) X' JO 

CO 1 9 0] hy-i'OfiJfflSA. B^^•:3l,^T. a 

A. B«^*:©#«i**fTr« 

Ati:A<DiFlJffi#{|!lSB100A|^O^$S9^102A^»||g 
104A^:''^•y->altIfS106A«fflV^T^ k<Oimm. * 

<> : Z/(p) xz/(n) -* Z/dn) 
*SI^S?»«Stof (m = pn) o CCX\ x\t^n 

to 20 
Co 19 4] C<Ott. B^6*^{C. K*.b = Kb.a. *<fig 

Co 1 9 5] SStC, A Wl/^jSS^r^a^*^ 

v::^^'«o«^sa, Sfca. AOiKffiis«xAA^e.fijffl 

#<i^ll100Al^oa£l$§g103A{C,):t7£lK(A) ^{t^ 
U Bga#{klSfil05A€-ffl(,^T«K(A) K^KiSk^^ 
mt\,1tt{k) =E(K(A) : Sa) . p<*U107A 

t y io7A»cEtt$nTi-'« t;^ o 
CO 1 9 6] €)^-;i'*3S:<o^^{b 

A«, flJffl#fi!l«B100Artoa»S4§8101A«:fflV^Ta 
SStr^atfs r«:A^tLTa^fiESi103A*^e.x-^'® 
#ftak«f^fi8f-5, ;^-;^*iP«:Bt«^^t^B105A 

^m^^xf—S'ssmm kic^o simt l fcBg^i c i 

Ci = E (k : P) . iCXimt^o SBtc, Hi« 
#fkS«105A*ffll/->TT- ^Bg^fbH k *.V7. K -^0 

A. B.-eag^fbtfcB^XCz*. C2 = e(Ka.b ; k). tc 
CO 19 7] A»^ mm&mmA^m^x citci^B 

[0 19 8] ®^-;l/*Xi^a^fl: 
B^i2S5nTtfcC1^C2^c^^LT. B(Dmmmmm 

B. A<t5. k=D(KB.A ; C2) . icxT-^mmtmk 
m^itb. ^^icT'-mmmk^m^r. p=d 
(k ; CO , tcT. ^-;i^*3^P^S^{b-r§o so 
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vb) fi^^'^T.^mK 


xa) (mod p) , exp 


* (xA, sa) tB<D^j>\ 

A.B^. 

[0 19 1] 

[S[125] KA.B-g(0(exp(yB 
(vB : sa) (mod n) ) ) . 

/<t^g§il02BtiggLg§104B^/^'y>'af^-»^§gl06B^ffl 
l/^T. g^i-cOK^^S (XB, SB) tACO'j^mm (yA, 
va) :6^6vX^S|Kb.a^. 
[0 19 2] 

[ai26] KB.A=g(0(exp(yA : xb) (mod p) . exp 
(vA : sb) (mod n) ) ) , 

[0 1 9 3] 

( (x. x) -> x) , 

[0 199] (mmms) mmmit^ib^mmiic^^^^ 

[0 2 0 0] ^ }^-;\y:^:iC(0^mt 

Ci-E (k : P) , JcT{t^t-§o ^Blc, 

is^a^. c2 = k*KA.B. itznmt^o 

[0 2 0 1] A(ijSfiSB108A;&ffll/>TCii:C2;&BtC 
[0 2 0 2] ' ;^-)l:^^com^it 

^ffli^Tvx^iiKB.Ai:C2 (Dmwmm^^Bmt^ 

k = c2*KA.B. :Atc. ^m^immmb^m\^^r'r- 
^Bimmkt^^. p = D(k : CO . tcTp^-;i/2^S: 

[0 2 0 3] (mmms) ^mm2i)'^^mms(D^7. 

^ll«*(i:^5l>Ts Ait A £0^lJffl#§J^^100AF^O^t 
^S[tglO2A^ra^t§104Ai:M'y^>afm§glO6A^ffll^ 
T. AOSSS;ii (xA, sa) tBCD'jJ^r^m (yB. vb) 

[0 2 0 4] 

[IS128] KA.B = g( (exp(yB : xa) (mod p) ) * (ex 
p(v8 : sa) (mod n) ) ) . 

{criipf&t^o mmc. BitB(ommmmmmm(D 

^t^^§§102Bi:}gg8§104B^M^>i/att^§§106B;&ffl 
l/^T. ^^(Om^M (xB. SB) ^ACOl^rwia (yA. 

va) f)^i^'^7.^UKB,A^. 

[0 2 0 5] 
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[IS129] KB,A=g( (exp(y* : xb) (mod p) )*(ex 
p(v* : sb) (mod n) ) ) . 

[0 2 0 6] (.nmm 1 0) hu-^<D^m^ii 

?iJffl#tlg@500|^©A-HS!5JgS501fc:||Lji*. II 

mm 1 A^e^ffl^j 9 tc^foa^r^ fijffl#ffli^sioortoa 

a^^gllOK -^#^§^^102, il^S103, iawtiio 

ffl^^T^f 4 Ms*^ ti^'n*- F4oort©aii[^4S4 

OK '<t^g[§g402. gi4^S403, mWmOA. 
{kgg405, M<y>>alt3»g406, ;><^'U407%fflt/'«Tff 
§fi#'vOjSim3S:ttA-F400rt<Dai:^S«408* 

ttl. tblH. fiJffl#fflySB500rtOji«SH502«rffl(,^ 
T3im[Hliei300«r/>tTjie-r5o 
[020 7] 
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[ia®©ffis.#*iKW] 

m 2 ] ^;i'®#fl::^a®a^«:5^-riK 


70 


[0 3 ] HfiSPlI 1 *^e> 9 ©->:^xA:gBgrt<OfiJffl#ffl!lS 
[0 4] USEfiaJ 1 9<D->;^-ri»^fiErtO-fe>^ffli|K 
[0 5] ^jgfi^Jl OOi'XTAflJdcrtOA-FrtaJWfi? 
[06] USEfi^Jl 0<OS^;^xA«|fi!trt©fiJffl«ffl!l^Hl^ 

104- fJffl#ffl!lg@100rttOiflJIS, 

105- fiJffl#il£fi100|^(OB|»#{bSfl. 

106- • ;pJffl#lllgHl 00F«g<O/N 7 i/ a H-}fS^ 

1 07- -fiJffl^fllSBI 00|*3O>< * y , 

108- fiJffi#tISSlOOF*3(Oiift^B^ 
200"-tV^§JSBo . 
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